Commit Graph

65 Commits

Author SHA1 Message Date
Lucas Clemente
7f907a17c2 reduce slice allocations in TruncateConnectionID 2016-05-20 01:09:04 +02:00
Lucas Clemente
f86875f746 reject small CHLOs to prevent amplification attacks
fixes #1
2016-05-19 16:20:22 +02:00
Lucas Clemente
7a97f34fac don't panic 🤓
fixes #93
2016-05-18 18:29:42 +02:00
Lucas Clemente
b185ea04e1 add CloseRemote method to stream
ref #109
2016-05-18 13:33:36 +02:00
Marten Seemann
7105b37f91 don't allow renegotiation of flow control parameters 2016-05-18 14:03:04 +07:00
Lucas Clemente
d0e6b993bb use new error codes throughout the server
fixes #86
2016-05-17 12:49:59 +02:00
Marten Seemann
fb6d90b813 cosmetic changes in tests 2016-05-16 18:32:08 +07:00
Lucas Clemente
de660dbfc5 run gofmt -s on main and server config 2016-05-15 14:42:56 +02:00
Lucas Clemente
c12a12518e run gofmt -s on tests 2016-05-15 14:42:34 +02:00
Lucas Clemente
9f63cdbd91 add stream.StreamID() 2016-05-14 13:35:43 +02:00
Marten Seemann
2ac53843ed improve error handling in ConnectionParametersManager 2016-05-14 17:30:36 +07:00
Marten Seemann
878d6a7140 negotiate maximum number of streams per connection
fixes #20
2016-05-14 17:10:49 +07:00
Marten Seemann
16bd559d9a negotiate idle connection state lifetime
work towards #20
2016-05-14 16:48:19 +07:00
Marten Seemann
43621c9c25 keep separate flow control windows for sending and receiving in ConnectionParametersManager
work towards #19, #20, #39
2016-05-14 15:29:15 +07:00
Lucas Clemente
c7126137d1 queue undecryptable packets for later decryption & possibly send PRST
fixes #38, fixes #69, fixes #73
2016-05-12 16:46:18 +02:00
Lucas Clemente
ea83ca8950 implement cert compression with cached certificates 2016-05-11 16:30:04 +02:00
Lucas Clemente
7c1e1cde56 rename GetCertCompressed to GetCertsCompressed 2016-05-11 11:41:44 +02:00
Lucas Clemente
20655bac5a rename GetCertUncompressed to GetLeafCert 2016-05-11 11:40:20 +02:00
Lucas Clemente
7609246b45 re-add support for version 30
fixes #72
2016-05-10 11:05:52 +02:00
Lucas Clemente
f4ac8ff949 read SNI from crypto handshake
fixes #48
2016-05-08 23:06:18 +02:00
Lucas Clemente
85c39721ec change Signer interface to return errors 2016-05-08 22:46:59 +02:00
Lucas Clemente
6738f0eadf add sni to crypto.Signer interface 2016-05-08 22:23:36 +02:00
Lucas Clemente
c6fb85be22 add handshake message logging 2016-05-08 22:09:02 +02:00
Lucas Clemente
ea63fe6205 add test asserting ICSL has a default value 2016-05-07 17:41:23 +02:00
Marten Seemann
bb807fa5bd implement sending of truncated ConnectionIDs 2016-05-06 21:53:21 +07:00
Lucas Clemente
bfe7117329 only take specific values from the params map 2016-05-06 11:43:39 +02:00
Lucas Clemente
f7d3da74b7 connection parameter manager docs 2016-05-05 23:36:41 +02:00
Lucas Clemente
7e0d59a5e6 make session timeout according to ICSL
fixes #54
2016-05-05 23:16:49 +02:00
Lucas Clemente
b239b71bb4 add GetIdleConnectionStateLifetime to connection params 2016-05-05 22:58:59 +02:00
Lucas Clemente
76d279ed8f make connectionparameters return its map in GetSHLOMap 2016-05-05 22:58:52 +02:00
Marten Seemann
6556e2f695 use protocol.ByteCount in frames, streams and session 2016-05-05 11:53:10 +07:00
Marten Seemann
77f34a9207 set initial flow control window from handshake parameters
fixes #50
2016-05-05 11:29:12 +07:00
Lucas Clemente
40ee20c02b use a ephermal curve25519 for forward secure key exchange
fixes #17
2016-05-04 12:45:25 +02:00
Marten Seemann
d07baef91b manage connection parameters in a separate class 2016-05-04 17:20:36 +07:00
Lucas Clemente
daf4e4a867 remove support for version 30, since we don't implement FEC at all 2016-05-02 20:56:02 +02:00
Lucas Clemente
53ef5669e2 fix crypto setup tests 2016-05-02 20:52:09 +02:00
Lucas Clemente
6178ef83fe discard undecryptable packets
hopefully fixes issue #33, the workaround is tracked in #38
2016-05-02 16:45:26 +02:00
Lucas Clemente
a6d3dca74c re-add crypto test 2016-05-02 14:40:43 +02:00
Lucas Clemente
623bf065fd accept null-encrypted pckts until an encrypted pckt has ben received
this should fix issue #33
2016-05-02 14:38:05 +02:00
Lucas Clemente
1e8d1453a8 implement public reset packet writing 2016-04-29 16:12:17 +02:00
Lucas Clemente
607ab843d6 close session when crypto stream errors 2016-04-27 12:49:55 +02:00
Lucas Clemente
9fc874be53 add newline to crypto error messages 2016-04-26 15:37:52 +02:00
Lucas Clemente
23a1e08e90 make stream private 2016-04-25 17:54:00 +02:00
Lucas Clemente
bb3c8b707b fix randomness 2016-04-21 13:48:42 +02:00
Lucas Clemente
7efc7f79d2 validate that CryptoSetup is an AEAD 2016-04-21 13:48:42 +02:00
Lucas Clemente
4e1942a76e improve inchoate CHLO recognition 2016-04-19 13:37:59 +02:00
Lucas Clemente
9cbeb49d49 change AEAD interface to use byte slices, simplifying its usage 2016-04-18 14:37:34 +02:00
Lucas Clemente
57b144bdef fix pending cryptosetup tests 2016-04-18 12:38:41 +02:00
Lucas Clemente
f5ec5262d1 stop crypto thread after handshake is complete or errors 2016-04-18 11:10:00 +02:00
Lucas Clemente
758fdeb3d3 change CryptoSetup to use streams 2016-04-18 11:03:49 +02:00